API Assinova

https://api.assinova.com.br/api/v1

# Login — recebe cookies httpOnly automaticamente
curl -X POST https://api.assinova.com.br/api/v1/auth/login \
  -H "Content-Type: application/json" \
  -d '{"email":"voce@email.com","password":"sua-senha"}' \
  -c cookies.txt

# Usar cookies autenticados em requests subsequentes
curl https://api.assinova.com.br/api/v1/documents \
  -b cookies.txt

# Usar API Key no header Authorization
curl https://api.assinova.com.br/api/v1/documents \
  -H "Authorization: Bearer ak_sua_chave_aqui"

# 1. Criar documento
curl -X POST https://api.assinova.com.br/api/v1/documents \
  -b cookies.txt \
  -H "Content-Type: application/json" \
  -d '{
    "title": "Contrato de Prestação de Serviços",
    "description": "Contrato referente ao projeto X"
  }'

# 2. Upload do PDF (multipart)
curl -X POST https://api.assinova.com.br/api/v1/documents/DOC_ID/upload \
  -b cookies.txt \
  -F "file=@contrato.pdf"

# 3. Adicionar signatário
curl -X POST https://api.assinova.com.br/api/v1/documents/DOC_ID/signers \
  -b cookies.txt \
  -H "Content-Type: application/json" \
  -d '{
    "name": "João Silva",
    "email": "joao@email.com",
    "phone": "+5511999999999"
  }'

# 4. Enviar para assinatura
curl -X POST https://api.assinova.com.br/api/v1/documents/DOC_ID/send \
  -b cookies.txt

# Verificar assinatura do webhook (HMAC SHA-256)
# O header X-Webhook-Signature contém o HMAC do body

# Node.js:
const crypto = require("crypto");
const signature = crypto
  .createHmac("sha256", webhookSecret)
  .update(rawBody)
  .digest("hex");

const isValid = signature === req.headers["x-webhook-signature"];